[olug] IPCHAINS

Dave Homan dave_cog at hotmail.com
Fri Oct 19 06:09:36 UTC 2001


Yes tom, this confused me at first too.  But the key is to think of an ip 
address as a collection of 4 eight bit numbers totalling 32 bits.  the /0 
(or /1 or /31 or /32...etc) represents which bits are important and which 
ones arent..  In this case 0 bits are set aside for the "important" bits, in 
affect meaning that any ip address possible (thus a wildcard).  The same 
affect would have been arrived at had you typed in 1.1.1.1/0 or even 
255.255.255.255/0.  So say you want to block all ip addresses from the ip 
block 66.60.x.y.  You would then not care about the x or the value of y so 
typically one would put something like
ipchains yadda yadda -s 66.60.0.0/16 yadda yadda, since only the first 16 
bits (ie the first two numbers) matter.

Hope this helps.


>except for a couple lines that have 0.0.0.0/0 is that supposed to be an IP
>address ? and if so whats the /0 ?  or do I just put that is as it reads ?
>Or is there another firewall that is better or easier ?  Thanks for any
>info.
>
>Tom
>
>
>-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_
>
>For help contact olug-help at bstc.net - run by ezmlm
>to unsubscribe, send mail to olug-unsubscribe at bstc.net
>or `mail olug-unsubscribe at bstc.net < /dev/null`
>(c)2001 OLUG http://www.olug.org
>
>-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_
>


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp


-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

For help contact olug-help at bstc.net - run by ezmlm
to unsubscribe, send mail to olug-unsubscribe at bstc.net
or `mail olug-unsubscribe at bstc.net < /dev/null`
(c)2001 OLUG http://www.olug.org

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_




More information about the OLUG mailing list